How to enable the IP FragGuard feature

[TCC_2]

Resolution

To enable the IP FragGuard feature, issue the sysopt security fragguard command.

The FragGuard feature was introduced in PIX Software version 4.2 and enhanced in PIX Software release 5.1 to include virtual re-assembly. In PIX Software release 6.0, the fragment command was added, which provided additional management of packet fragmentation and improved compatibility with Network File System (NFS).

For more information about FragGuard, refer to these documents:

• The sysopt section of Cisco PIX Firewall Software: Command Reference      
• The FragGuard and Virtual Re-assembly section of Release Notes for the Cisco Secure PIX Firewall Version 5.1(1)      
• The fragment section of Release Notes for the Cisco Secure PIX Firewall Version 6.0(1)